diff --git a/CHANGELOG.md b/CHANGELOG.md index 4f94cd4f23143ff9235ccdb833840e31666a92ef..82688e04c44949d6b9599ff9c8bf696763e92f09 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [1.1.2320154-bb.23] - 2025-03-21 + +### Changed + +- Enabled dynamic network policy for istio + ## [1.1.2320154-bb.22] - 2024-12-13 ### Changed diff --git a/README.md b/README.md index 5afecffd50db83ef0c3b2edc7e0863fd97a49e42..76f4019896699498b7be289e1b6e9c03108605e6 100644 --- a/README.md +++ b/README.md @@ -1,14 +1,14 @@ <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. --> # fortify-ssc -    +    A Helm chart for Fortify Software Security Center application ## Upstream References -- <https://www.microfocus.com/en-us/solutions/application-security> -* <https://github.com/fortify/helm3-charts> +- <https://www.microfocus.com/en-us/solutions/application-security> +- <https://github.com/fortify/helm3-charts> ## Upstream Release Notes diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 45ace0e72032a66b9e980f7759e1e585b7559a4a..c5041782f5e003b70ec7c22da0a9e1aceac0a128 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 description: A Helm chart for Fortify Software Security Center application name: fortify-ssc -version: 1.1.2320154-bb.22 +version: 1.1.2320154-bb.23 appVersion: 24.4.2.0009 type: application keywords: diff --git a/chart/templates/bigbang/networkpolicies/istio.yaml b/chart/templates/bigbang/networkpolicies/istio.yaml index ddacf7a52055d09bc8a0b5380018fb50400483dc..9a62f8030d260424786c8ce42d6d6cba2ef86f77 100644 --- a/chart/templates/bigbang/networkpolicies/istio.yaml +++ b/chart/templates/bigbang/networkpolicies/istio.yaml @@ -12,7 +12,11 @@ spec: - to: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.egress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: app: istiod @@ -32,7 +36,11 @@ spec: - from: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: {{- toYaml .Values.networkPolicies.ingressLabels | nindent 10}}